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User provides Identification information 
(VPN-ID, UID, Pwd) for authorization to 
access VPN host network 
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Wireless Access Point (WAP) redirects 
(UID and Pwd) to VPN host network's AAA 
server based on VPN ID 
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Do not grant access to wireless 
network; optionally allow wireless user 
to retry to obtain access 



VPN host network grants access and 
sends its private IP address to WiFi 
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WAP grants access to wireless usser 
and assigns VPN host network's 
private IP address to user 
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Encrypted session established 
between user and WAP 




Inventor: Haixiang He 
Title: METHOD AND APPARATUS FOR ESTABLISHING VIRTUAL PRIVATE 
NETWORK TUNNEL'S IN A WIRELESS NETWORK 
Attorney Docket No: 15918BAUS01U 
Page 4 of 4 



Figure 6 



,14 



82 



88 



Antenna/ 
. Antenna Port 



Wireless Access Point 



84 



Switch Fabric 



86' 



Processor 



Control 
Logic 



Network Port 



VPN 
Software 



Routing 
Information 
Base 



Policy 
Module 



Protocol 
Stack 



Encryption 
Module 



90 

92 
94 
96 
98 



-80 



